Describe the vulnerability management cycle from asset discovery through verification, and explain why verification matters.

### The concept Vulnerability management is continuous rather than a one-time scan. Discovery identifies systems, software, owners, data, and business importance. Identification uses scanning, advisories, configuration reviews, testing, audits, and reports. Assessment estimates likelihood and impact; prioritization directs effort. Remediation may involve patching, reconfiguration, upgrading, isolating, restricting, replacing, or redesigning. Verification checks that the weakness is actually resolved and that the change did not break an important service. Monitoring tracks exceptions, new advisories, and recurrence. ### What a good answer covers - The sequence from asset discovery to monitoring. - Risk assessment and prioritization before action. - Multiple remediation options, not patching alone. - Verification that the fix worked and caused no unacceptable operational effect. ### Terms - **Remediation**: Action taken to reduce or remove a vulnerability's risk. - **Asset inventory**: A record of systems, software, owners, and importance. ### Remember A fix is not complete until its effectiveness has been checked.